DevSecOps Engineering Lead CGEMJP00346044

Experis UK; Greater London; Hybrid; GBP 76,000 - 127,000; Full time

Job summary

Experis UK is seeking an experienced Lead DevSecOps Engineer for a contract-to-permanent role, leading security- and automation-focused delivery across Azure/AWS/OCI platforms. The role combines client-facing leadership with hands-on engineering across CI/CD, IaC, and security tooling.

The position is hybrid with travel to client sites and Capgemini sites, and requires active SC clearance; average travel is about one day per week to London and/or Bristol/Bath.

Qualifications

• Proven DevSecOps lead experience across multiple digital products.
• Hands-on and able to lead, align and govern security- and compliance-driven pipelines.
• Experience delivering within UK Government Digital Service (GDS) lifecycle.
• Strong collaboration with developers, testers and security engineers.

Responsibilities

• Design and evolve secure CI/CD pipelines and automation across environments.
• Embed security scanning and vulnerability management into delivery workflows.
• Oversee IaC practices and policy enforcement for cloud deployments.
• Coordinate incident response, patch cycles, and compliance reporting.
• Document runbooks and security controls in Confluence.

Skills

CI/CD & GitOps

Security tooling

Containers & orchestration

Infrastructure as Code

Observability

Scripting & automation

Cloud fundamentals

GDS lifecycle (UK Public Sector)

Cross-functional leadership

Tools

GitHub Actions

Argo CD

Argo Rollouts

Trivy

HashiCorp Vault

cert-manager

Docker

AWS EKS

Terraform

Grafana

Loki

Job description

Role Title: DevSecOps Engineering Lead

Duration: contract to run until 31/03/2027

Location: Hybrid role, predominantly remote, with some travel to Client and Capgemini sites (estimated average 1 day per week to London and/or Bristol/Bath; occasionally more during specific delivery phases).

Rate: up to £690 p/d Umbrella inside IR35

Clearance required: Active SC is highly desired

Role Purpose / Summary

We are seeking an experienced, client-facing Lead DevSecOps Engineer to drive and coordinate DevSecOps practices across multiple digital products delivered as part of a wider Client business and digital transformation programme, where Capgemini is the client's prime Digital Delivery Partner. Products will be deployed across the Client digital estate (Client Cloud), including Client's instances of Microsoft Azure (Client Cloud ACE / i-ACE), AWS (Client Cloud ICE) and Oracle Cloud Infrastructure (OCI / Client Cloud OCE).

You will embed security, compliance and automation into the software delivery lifecycle, ensuring platforms and applications meet stringent security and operational standards. You will also establish consistent, documented processes used by DevSecOps engineers across each environment, including a coordinated approach for releasing updates across the integrated set of products and platforms in scope.

This role requires deep expertise in CI/CD pipelines, delivery workflows and security tooling across these cloud environments, alongside strong collaboration with developers, DevSecOps engineers, infrastructure engineers and test teams.

Key Responsibilities

• Design, implement, document and continuously improve DevSecOps practices across the delivery teams, including:
• Secure, automated CI/CD pipelines
• Security scanning integrated into build, test and deployment workflows
• Vulnerability lifecycle management, including allowlist processes and risk acceptance where required
• Secrets management and identity/access management
• Policy enforcement for workloads, container images and infrastructure
• Observability, monitoring, logging and audit controls
• Partner with developers to embed secure-by-design engineering and ensure compliance with Client security standards.
• Enable and govern Infrastructure as Code (IaC) practices across teams and environments.
• Contribute to incident response, patching cycles and compliance reporting, ensuring lessons learned are captured and actions tracked.
• Document security processes, controls and operational runbooks in Confluence.

Essential

Key Skills and Experience

• Proven experience as a DevSecOps Lead, establishing and operating DevSecOps ways of working and associated tooling across the following areas (hands-on and leading others):
• CI/CD and GitOps (e.g. GitHub Actions, Argo CD, Argo Rollouts)
• Security and compliance tooling (e.g. Trivy scanning and vulnerability management, HashiCorp Vault, cert-manager)
• Containers and orchestration (e.g. Docker, AWS EKS)
• Infrastructure as Code (e.g. Terraform)
• Observability (e.g. Grafana, Loki)
• Scripting and automation (e.g. Python, Bash)
• Cloud and networking fundamentals (e.g. AWS IAM, S3, network policies)
• Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement.
• Experience working with and leading distributed and hybrid teams.
• Demonstrated ability to work across cross-functional teams, particularly with developers, testers and DevSecOps engineers.
• Strong facilitation, communication and stakeholder management skills, with experience influencing at multiple levels.

Highly Desirable

• Experience leading DevSecOps engineering for products hosted on the Client digital estate, spanning Microsoft Azure (Client Cloud ACE / i-ACE), AWS (Client Cloud ICE) and Oracle Cloud Infrastructure (OCI / Client Cloud OCE).